Kimsuky Hackers Use Weaponized QR Codes for Mobile Malware Distribution
Article Content
Browse articles 
The North Korean state-linked group Kimsuky has initiated a campaign using weaponized QR codes to distribute malicious mobile applications. This attack targets users through phishing sites that mimic package delivery services, with victims receiving smishing messages containing links to these sites. The malicious campaign was identified by security researchers in September 2025.
Ask AI about this cluster
Answers cite the sources they use
Updated 212d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track Kimsuky in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
2026 AV-Comparatives EPR Test Results Released AV-Comparatives published the results of its 2026 Endpoint Prevention and Response (EPR) Test, evaluating 14 enterprise security products against 50 multi-stage attack scenarios. The test, which ran from May to August 2026, incorporated AI-assisted techniques and followed the MITRE ATT&CK framework. Eleven products… 
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…